PT-2015-2592 · Owncloud · Owncloud Ios App

Published 2015-10-29 · Updated 2025-03-26 · CVE-2015-5955

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions ownCloud iOS app versions prior to 3.4.4

Description The issue is related to the ownCloud iOS app and its web application for data synchronization, which lacks protection of service data. This might allow a remote attacker to obtain sensitive credential and cookie information by reading authentication headers.

Recommendations For ownCloud iOS app versions prior to 3.4.4, update to version 3.4.4 or later to resolve the issue.

Fix

Information Disclosure

Insufficiently Protected Credentials

Weakness Enumeration

CWE-200

CWE-522

Related Identifiers

BDU:2015-11957

CVE-2015-5955

Affected Products

Owncloud Ios App

References · 5

• https://owncloud.org/security/advisory/?id=oc-sa-2015-013 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-11957 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2015-5955 · Security Note
• https://t.me/cvenotify/116372 · Telegram Post
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-5955 · Note